Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File:                     r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier:          nLZLsyzZGm1fERHsSHaxpVFLYfiXZpp2dSeuD9DSPsU=
Subject key identifier:   66:56:DA:0E:2D:4E:BC:98:D8:AC:B5:4B:CD:09:C7:95:04:4F:BB:E3
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer:       /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial:       01901E58CA522F14500ADE1825347687D203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number:          02CD
Signing time:             Sun 16 Jun 2024 00:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:53 +0000
Files and hashes:         1: 7ek9jw_D1SZL7GHk9xoMUUJn--8.roa (hash: 5WdjWFWUNpBg8x3yWq+u433pecv794pH1RrHL8I6Ubc=)
                          2: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: l/2fRMEwJdzW3moFdUVhqM+oK8E/9MtEs4jCQCMf/1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:ca:52:2f:14:50:0a:de:18:25:34:76:87:d2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
        Validity
            Not Before: Jun 16 00:00:53 2024 GMT
            Not After : Jun 17 00:00:53 2024 GMT
        Subject: CN=6656da0e2d4ebc98d8acb54bcd09c795044fbbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7c:95:62:55:0c:a8:32:90:9e:b6:84:aa:02:
                    b1:38:bb:39:d9:47:34:85:1b:86:d1:00:c1:d5:d4:
                    22:ab:9b:26:c2:b6:54:6d:b5:1d:3b:4d:da:04:4e:
                    49:9c:c5:ab:71:59:35:3d:ff:c0:c1:56:42:0c:7a:
                    94:a7:6a:67:c2:cf:66:37:91:03:4c:ee:e2:b1:cc:
                    ca:bf:59:f2:2a:e9:8f:bc:2e:11:6c:f0:e5:9e:91:
                    fb:20:5c:26:cb:92:d4:d5:e4:c2:0f:4d:63:88:c3:
                    b8:90:e0:f8:34:e1:b9:00:20:4f:82:c5:e7:a6:45:
                    f2:42:85:c2:6b:b9:74:84:16:78:5c:ab:7d:29:18:
                    19:f8:ae:b6:b4:66:2b:74:7a:5e:04:a2:bd:30:fc:
                    b9:08:1a:65:82:6e:e7:e8:fd:3a:2e:6f:8c:7d:69:
                    9b:86:c8:0b:a7:e5:77:ed:54:a8:82:33:82:11:7a:
                    c4:cf:7a:70:6c:53:35:7e:4f:c7:11:ca:ac:43:a3:
                    f7:d0:c8:3e:bc:3b:0f:5a:d7:12:5b:a8:a9:72:cf:
                    7a:6e:b5:c8:4f:7e:7c:8f:33:e1:d0:7b:35:43:75:
                    ad:7e:47:10:af:25:26:8c:91:1e:49:b4:0f:fd:96:
                    db:c3:ad:15:79:72:d5:56:67:f7:ab:9c:de:f2:cc:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:56:DA:0E:2D:4E:BC:98:D8:AC:B5:4B:CD:09:C7:95:04:4F:BB:E3
            X509v3 Authority Key Identifier:
                keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:7f:1d:0d:61:84:c0:ba:b0:05:16:ce:f2:0e:5c:5d:5d:88:
         d2:a7:96:8b:f2:02:1e:b6:06:37:eb:51:bf:ea:32:b2:26:d6:
         a1:ac:ff:9a:74:eb:e8:97:4d:1c:69:e5:10:45:68:a5:e6:e5:
         a3:ea:54:80:6f:ce:3d:71:9d:94:32:95:95:05:14:0b:fd:aa:
         d9:29:71:c6:b9:95:eb:9e:0d:3c:2c:ae:74:70:ee:af:06:e7:
         0c:4b:26:6f:46:3b:fc:96:59:04:ab:15:50:18:88:3f:f0:08:
         10:68:40:cb:45:b6:8b:f4:68:41:34:56:4d:e6:0c:d4:63:19:
         2d:f4:32:c1:9f:d9:03:f4:4d:cf:a2:9b:68:47:c8:9c:63:23:
         79:57:f0:b6:a1:64:d4:40:88:24:b4:9c:e0:d1:a3:ef:6b:00:
         6f:42:96:36:42:7e:b6:43:22:4b:83:7b:73:a7:42:59:1a:20:
         9c:5a:c2:a9:74:75:e7:f8:45:ea:da:f7:64:2b:10:9d:c3:58:
         41:d1:64:a4:b4:91:2b:cd:cd:d8:70:21:70:96:65:35:d0:92:
         ad:bd:d3:27:4f:38:64:38:ec:3f:65:3f:46:5a:fe:02:a6:85:
         f5:ea:99:e7:87:29:67:01:e4:f9:29:7e:d0:10:44:3a:91:ea:
         67:56:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:08 2024 by rpki-client on console-fra.rpki-client.org